Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/xDzgSvQttBskQ-zPjwhmtn2B398.roa
File: xDzgSvQttBskQ-zPjwhmtn2B398.roa (raw, json)
Hash identifier: EdSogvlM9mSQ05nn+3fcbrImICKMOgBlTbPv5RJ+F70=
Subject key identifier: C4:3C:E0:4A:F4:2D:B4:1B:24:43:EC:CF:8F:08:66:B6:7D:81:DF:DF
Certificate issuer: /CN=6c00666b0da157c9334f4103659d2dbbf5335783
Certificate serial: 01856B89F8B0E96C7624732B2F95C2FB9DCA
Authority key identifier: 6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/xDzgSvQttBskQ-zPjwhmtn2B398.roa
Signing time: Sun 01 Jan 2023 04:14:42 +0000
ROA not before: Sun 01 Jan 2023 04:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.183.0/24 maxlen: 24
5.253.180.0/22 maxlen: 24
5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:89:f8:b0:e9:6c:76:24:73:2b:2f:95:c2:fb:9d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c00666b0da157c9334f4103659d2dbbf5335783
Validity
Not Before: Jan 1 04:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43ce04af42db41b2443eccf8f0866b67d81dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:54:72:7f:26:64:ab:59:13:d0:92:bb:7d:
10:74:3e:2d:7c:35:e2:c3:99:c8:20:12:06:e8:a5:
05:0b:54:12:e4:bf:80:e3:48:98:6b:d1:b2:bb:c4:
2c:79:f7:83:4c:a2:3f:ad:e2:05:01:fb:cc:f9:99:
12:8b:2e:67:24:27:27:c2:78:45:3e:2e:c2:1a:71:
a2:2d:9c:9d:94:46:52:de:08:78:94:34:e3:f1:16:
49:df:44:c0:14:4a:d5:6f:2c:2e:79:f8:5c:7b:bb:
17:fa:2d:de:cd:19:d4:65:1d:e5:10:0c:3b:38:08:
67:ee:0e:44:47:d4:e6:e5:27:e1:2f:e3:1e:4f:8b:
79:24:67:03:ab:fe:ad:e0:54:e7:1a:45:05:c1:42:
63:89:bd:19:1b:b3:70:d7:a6:d0:cc:ab:83:e7:95:
da:94:f3:1e:9e:58:69:0f:2d:e1:31:22:f0:51:ef:
3d:dc:ee:62:cd:de:d2:1f:58:0e:85:85:90:10:87:
ae:89:e3:9d:bc:0b:72:06:c3:52:a4:81:f4:82:5a:
ec:72:4a:5f:8d:bd:48:c5:9e:7f:bf:4f:4a:75:b8:
ed:d3:e2:c3:a9:7f:e6:bc:32:f8:f7:b3:fc:12:ca:
b6:0f:71:e9:a1:f4:3b:33:17:63:ec:ff:f4:50:cc:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3C:E0:4A:F4:2D:B4:1B:24:43:EC:CF:8F:08:66:B6:7D:81:DF:DF
X509v3 Authority Key Identifier:
keyid:6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/xDzgSvQttBskQ-zPjwhmtn2B398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/bABmaw2hV8kzT0EDZZ0tu_UzV4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.180.0/22
Signature Algorithm: sha256WithRSAEncryption
27:bc:9d:69:c2:ed:4c:46:cb:3c:b6:c6:0b:4b:cb:3e:f1:8a:
ca:02:f7:8d:c0:c6:5f:54:3c:77:ce:44:7c:03:3f:d0:60:7f:
01:58:b5:11:ff:9e:14:01:ad:2c:1c:05:57:7d:a1:f9:06:66:
28:1d:09:2d:6e:56:32:2c:3d:4a:f3:42:94:1e:d9:5a:b5:1d:
6f:6b:6d:77:e9:4d:03:eb:f7:86:c3:fc:24:cb:2f:8f:65:be:
63:39:aa:84:60:f4:bd:8d:46:d1:07:25:8b:f9:69:3b:0b:84:
bd:c4:00:55:37:f7:64:ba:21:60:44:44:c2:c6:45:4a:a4:25:
ac:ac:8a:f9:76:6e:b9:1d:ab:29:23:9d:d7:d6:ae:5b:4c:81:
e4:bc:43:b5:11:ff:4d:63:ee:3a:a8:b1:f5:43:02:7e:47:af:
fd:ea:ae:44:02:3a:3f:41:e7:85:f7:3a:f3:9d:60:9f:ca:85:
ad:bb:c8:ae:87:6f:81:62:66:d6:09:26:e4:d5:cb:27:c7:67:
25:e1:1b:dd:9f:6a:5e:38:da:0c:21:f1:b7:d3:b3:8a:f2:18:
d0:53:2f:12:fe:48:2d:ed:7a:bd:b0:c0:31:7e:bd:88:89:f4:
d5:13:5c:d7:84:9e:68:83:69:05:85:b1:a4:37:68:d4:0b:42:
ac:fb:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:11 2023 by rpki-client on console.sobornost.net